WannaCry "likely enters one machine and spreads laterally inside using a scan/exploit playback," says Vectra CTO Oliver Tavakoli. "It doesn't require external command-and-control signaling, and renders traditional perimeter defenses, which look for a call-back, useless in detection and prevention."

Read the article